[Openswan dev] Out of tree compilation?

[Paul Wouters]

On Mon, 5 Jan 2004, Michael Richardson wrote:

>   You can build the ipsec.o module completely outside of the kernel with OSW 2.x.x.
>   Just point it at an appropriate /usr/src/linux/ (could even be on CDrom..)

Not always. RHEL3 (Advanced Server), or any other kernel containing the ipsec backport
won't compile.
 
>   Only if you need NAT-traversal.
>   If there is interest, another way of doing this has been considered - a
> netfilter module.

nat-t is already in the 2.6/2.4 backport code as UDP_ENCAPS. A netfilter module
at this point seems moot.

Paul